Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: jzkfKVj+qcqqzREGjDWKRQAk81YhjTVqq/EjGiqzGiQ=
Subject key identifier: 89:0E:5B:AF:0D:D8:4F:D9:60:04:46:FF:F3:C1:AF:8A:E1:52:80:B5
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 01964CD94E2C9341960A1E1802A89EBB4DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 07:00:31 +0000
Manifest this update: Sat 19 Apr 2025 07:00:31 +0000
Manifest next update: Sun 20 Apr 2025 07:00:31 +0000
Files and hashes: 1: B_Zgbr5zHePzPX0kzYDR02lMQd0.roa (hash: oTbqq1QauLG6/LAk+F5PPgZYsS1F6hnMzvsYBg19oqU=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: RvtEBeF+b+Gt3A7asEJ3lvNnNtftUCtsRnEbWnaEMNw=)
3: iB3qHj6jc-vYvyyZv2bCeRVUFSQ.roa (hash: GN+JMGlNiyjaBMnzgzzZxTHdUtxnuMF8sNkbCRGW38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:4e:2c:93:41:96:0a:1e:18:02:a8:9e:bb:4d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Apr 19 07:00:31 2025 GMT
Not After : Apr 20 07:00:31 2025 GMT
Subject: CN=890e5baf0dd84fd9600446fff3c1af8ae15280b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:10:5b:6c:fc:d0:93:05:92:5a:1b:b4:cc:
4f:a9:64:b7:8b:83:c3:4e:f5:47:6b:a2:65:00:bb:
75:a0:24:56:78:02:91:53:e6:33:ee:d9:11:d8:9d:
f6:23:e2:0f:0e:19:d5:f0:12:75:6f:6e:04:26:66:
1e:df:17:82:81:ab:3b:bf:78:01:a7:a4:0e:03:49:
cb:ab:78:d4:dc:6e:5e:3d:b5:4d:bc:27:53:1b:66:
6e:d8:0f:b4:c4:eb:84:14:e3:d9:09:f5:8d:13:e8:
9e:07:b3:98:31:80:70:2a:8b:34:0b:b0:65:d3:70:
a1:b1:25:a6:9f:f3:25:7b:c0:b4:a5:62:16:bf:9e:
21:fa:c8:54:fe:51:94:0a:dc:8d:b2:21:4a:55:86:
38:e4:1d:8a:1c:01:b7:e5:df:fe:f4:3c:9c:11:be:
2b:75:78:64:fd:66:22:4b:78:4c:e2:51:e9:26:cd:
6c:55:d0:b1:bc:f4:27:98:54:08:8b:3f:df:0a:35:
aa:fb:29:a7:6c:f3:87:88:64:fb:75:d4:ee:27:5a:
ea:4d:53:e8:4b:20:a8:05:c0:a9:76:df:c7:7d:13:
88:91:5c:fa:ef:53:0d:24:2b:b6:ca:aa:98:41:71:
9b:da:b5:e9:f8:bb:e8:59:ce:18:d5:b7:1f:c4:80:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:5B:AF:0D:D8:4F:D9:60:04:46:FF:F3:C1:AF:8A:E1:52:80:B5
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fb:47:53:a4:38:03:b2:97:e0:08:d4:40:50:b6:a8:19:ee:
52:1d:34:21:1f:b2:a6:0a:b0:65:3a:15:4b:67:32:a1:c1:e2:
68:bf:0a:55:8e:7e:85:89:ca:44:39:e9:cf:8c:ea:f0:9a:60:
88:1c:c6:bc:4d:db:21:93:3a:88:47:25:0e:53:ef:c6:3f:1c:
ab:9e:9c:3d:a7:63:7e:18:b2:dc:cd:ed:f7:46:a6:e3:7e:b2:
10:6d:3b:e8:f5:75:f0:6c:d5:55:63:e5:4a:4f:50:ee:8d:ab:
72:07:c0:5e:5c:aa:40:f4:d1:64:d5:14:f8:c3:01:44:9b:88:
df:08:b4:da:3e:3f:d5:08:49:de:65:24:9b:9b:ef:65:aa:f1:
88:3f:06:35:26:de:dd:5d:5f:c1:d7:89:be:c2:4b:8a:a0:99:
7a:78:ae:da:40:f7:ef:bd:f2:3f:ad:47:e5:3c:99:ae:c0:3b:
76:16:2b:93:03:b7:5c:3e:a5:fb:8e:87:ff:03:66:27:5c:d6:
23:b5:3f:60:cb:a4:64:cd:e7:59:95:ef:23:92:6f:db:89:00:
da:28:e9:b6:6d:1f:53:37:44:3d:b3:f1:07:81:34:a2:d3:d0:
ea:3f:cb:61:7e:72:39:c1:63:4b:64:68:93:3d:98:85:83:ac:
ef:80:fb:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2U4sk0GWCh4YAqieu03dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTAyZGJlZTYyYzk4ZjAxZjIwZjQ3NzBkMTZhNDdmNzlh
YmUzMmMwHhcNMjUwNDE5MDcwMDMxWhcNMjUwNDIwMDcwMDMxWjAzMTEwLwYDVQQD
Eyg4OTBlNWJhZjBkZDg0ZmQ5NjAwNDQ2ZmZmM2MxYWY4YWUxNTI4MGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IMQW2z80JMFklobtMxPqWS3i4PD
TvVHa6JlALt1oCRWeAKRU+Yz7tkR2J32I+IPDhnV8BJ1b24EJmYe3xeCgas7v3gB
p6QOA0nLq3jU3G5ePbVNvCdTG2Zu2A+0xOuEFOPZCfWNE+ieB7OYMYBwKos0C7Bl
03ChsSWmn/Mle8C0pWIWv54h+shU/lGUCtyNsiFKVYY45B2KHAG35d/+9DycEb4r
dXhk/WYiS3hM4lHpJs1sVdCxvPQnmFQIiz/fCjWq+ymnbPOHiGT7ddTuJ1rqTVPo
SyCoBcCpdt/HfROIkVz671MNJCu2yqqYQXGb2rXp+LvoWc4Y1bcfxIBPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkOW68N2E/ZYARG//PBr4rhUoC1MB8GA1UdIwQY
MBaAFB/gLb7mLJjwHyD0dw0WpH95q+MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMt
MjEyNTNlYTlmM2E0LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMtMjEyNTNlYTlmM2E0
LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPtHU6Q4
A7KX4AjUQFC2qBnuUh00IR+ypgqwZToVS2cyocHiaL8KVY5+hYnKRDnpz4zq8Jpg
iBzGvE3bIZM6iEclDlPvxj8cq56cPadjfhiy3M3t90am436yEG076PV18GzVVWPl
Sk9Q7o2rcgfAXlyqQPTRZNUU+MMBRJuI3wi02j4/1QhJ3mUkm5vvZarxiD8GNSbe
3V1fwdeJvsJLiqCZeniu2kD3773yP61H5TyZrsA7dhYrkwO3XD6l+46H/wNmJ1zW
I7U/YMukZM3nWZXvI5Jv24kA2ijptm0fUzdEPbPxB4E0otPQ6j/LYX5yOcFjS2Ro
kz2YhYOs74D7Jw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:53 2025 by rpki-client